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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claimsl&? 
the application: 

1 . (Currently amended) A method of deterring a rollback attack against a&st 
database comprising: 

determining if the first database is corrupted, the first database being 
associated with a first authentication code; 

determining if a second database is corrupted when the first database is 
corrupted, the second database being associated with a second authenticatiori 
coder and tho socond database having contents substantially the same as the&sl 
database: and 

when the second database is not corrupted, presenting a challenge code to a 
user of an application program accessing the databases, requiring the user to obtain 
a passcode in response to the challenge code, and determining validity of the 
passcode, and, when the passcode is valid, recalculating the second authentication 
code using a portion of the first authentication code, copying the second database 
over the first database, and proceeding with authorized operations for processing 
content by an application program. 

2. (Cancelled) 

3. (Original) The method of claim 1, further comprising (::ontinuing with 
authorized operations of the application program for processing content when the 
first database is not corrupted. 

4. (Original) The method of claim 1 , wherein the first database comprises 
usage rules for processing selected content by the application program, the usage 
rules including a copy count for the selected content. 
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; 5. (Original) The method of claim 1 , wherein the content comprises digital 

audio data. 

6. (Cancelled) 

7. (Original) The method of claim 1 , wherein the first authentication code 
comprises a hash of the first database and a first secret, and the second 
authentication code comprises a hash of the second database and a second secret, 

I the first secret being different than the second secret. 

8. (Currently amended) The method of claim 7, wherein the portion of the 
first authentication code c omprises the first secret. 

9. (Original) The method of claim 2, further comprising allowing a 
predetermined number of operations of copying the second database over the first 
database without presenting a challenge code to the user, requiring the user to 
obtain the passcode, and determining the validity of the passcode. 

10. (Currently amended) An article comprising: a storage medium having a 
plurality of machine readable instructions, wherein when the machine readable 
instructions are executed by a processor, the machine readable instructions provide 
for deterring a rollback attack against a first database by 

determining if the first database is corrupted, the first database being 
associated with a first authentication codeyi 
; b^Kietermining if a second database is corrupted when the first database is 

corrupted, the second database being associated with a second authentication 
coder and t ho s e cond databas e having contents substantially the same as the first 
. databaseri and 

when the second database is not corrupted, presenting a challenge code to a 
user of an application program accessing the databases, reguiring the user to obtain 
I a passcode in response to the challenge code, arid determining validitv of the 
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passcode, and, when the passcode is valid. recalculating the second authentication 
code using a portion of the first authentication code, copying the second database 
over the first database, and proceeding with authorized operations for processing 
content by an application progrann. 

11. (Cancelled) 

12. (Currently amended) The article of clalnrj 10, further connprising machine 
readable instructions for continuing with authorized operations of the application 
program for processing content when the first database is not cornjpted. 

13. (Original) The article of claim 10, wherein the first database comprises 
usage rules for processing selected content by the application program, the usage 
rules including a copy count for the selected content. 



14. (Original) The article of claim 10. wherein the content comprises digital 
audio data. 

15. (Cancelled) 

16. (Original) The article of claim 10, wherein the first authentication code 
comprises a hash of the first database and a first secret, and the second 
authentication code comprises a hash of the second database and a second secret, 
the first secret being different than the second secret. 

17. (Currently amended) The article of claim 16. wherein the portion of the 
first authentication code comprises the first secret. 



1 8. (Currently amended) The article of claim 1 1 . further comprising machine 
j readable instructions for allowing a predetermined number of operations of copying 
the second database over the first database without presenting a challenge code to 

. i 

! 

i 7 
i 
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the user, requiring the user to obtain the passcode, and determining the validity of 
the passcode. 



19. (Currently amended) A method of deterring circumvention of a content 
protection system of an application program via restoration of a first control 
database, the first control database being associated with the application program 
and including usage rules for digital audio content, comprising: 

determining if the first control database is corrupted, the first control database 
being associated with a first message authentication code (MAC); 

determining if a second control database is corrupted when the first control 
database is corrupted, the second control database being assocfated with a second 
message authentication code (MACjr and _thQ socond contro l d a taba so-having 
contents substantially the same as the first control database: and 

when the second control database is not corrupted, performing the following 
actions: 

presenting a challenge code to a user of the application program; 
requiring the user to obtain a passcode in response to the challenge 
code; ao^ 

determining validity of the passcode; 

recalculating the second MAC using a portion of the first MAC and 
copying the second control database over the first control database when the 
passcode is valid; and 

proceeding with authorized operations for processing the digital audio 
content by an application program consistent with the usage rules. 

20. (Original) The method of claim 19, wherein the usage rules comprise a 
copy count for the digital audio content. 

21. (Cancelled) 
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22. (Original) The method of claim 19, wherein the first MAC comprises-a 
hash of the first control database and a first secret, and the second MAC comprises 
a hash of the second control database and a second secret, the first secret bems 
different than the second secret. 

23. (Original) The method of claim 19, further comprising allowing a 
predetermined number of operations of copying the second control database om 
the first control database without presenting a challenge code to the user, requmng 
the user to obtain the passcode, and determining the validity of the passcode. 

24. (Original) The method of claim 19, wherein copying of the second control 
database over the first control database is performed after beginning execution of 
the application program but before proceeding with authorized operations for 
processing the digital audio content by an application program consistent with the 
usage rules. 

25. (Currently amended) An article comprising: a storage medium having a 
plurality of machine readable instructions, wherein when the machine readable 
instructions are executed by a processor, the machine readable instmctions provide 
for deterring circumvention of a content protection system of an application program 
via restoration of a first control database, the first control database being associated 

j with the application program and including usage rules for digital audio content, by 

determining if the first control database is corrupted, the first control database 

being associated with a first message authentication code (MAC); 

determining if a second control database is conrupted when the first control 

database is corrupted, the second control database being associated with a second 

message authentication code (MAC W and th e s e cond contro l databa c o having 

I contents substantially the same as the first control database: and 

j ' 

I when the second control database is not corrupted, performing the following 

actions: 

I 

i 9 
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presenting a challenge code to a user of the application program; 
requiring the user to obtain a passcode in response to the challenge 
code; af^ 

determining validity of the passcode; 

recalculating the second MAC using a portion of the first MAC and 
copying the second control database over the first control database whefDfie 
passcode Is valid; and 

proceeding with authorized operations for processing the digital m(Ss> 
content by an application program consistent with the usage mfes. 

26. (Original) The article of claim 25, wherein the usage rules comprise a 
copy count for the digital audio content. 

27. (Original) The article of claim 25, wherein the first MAG comprises a hash 
of the first control database and a first secret, and the second MAC comprises a 
hash of the second control database and a second secret, the first secret being 
different than the second secret. 

28. (Currently amended) The article of claim 25. further comprising machine 
readable instructions for allowing a predetenmined number of operations of copying 
the second control database over the first control database without presenting a 
challenge code to the user, requiring the user to obtain the passcode, and 
determining the validity of the passcode. 
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